While Compound’s developers submitted a fix for the protocol’s bug on Sept. 30, the update won’t take effect until a seven-day time-lock on code updates has passed.